$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14f9e3ea-a772-3edc-9058-5316bea1606b.roa File: 14f9e3ea-a772-3edc-9058-5316bea1606b.roa (raw, json) Hash identifier: lUAmDMpnwEQm3kC0AV6MEe08xP1gOcMRu+jWdU21pEk= Subject key identifier: 1D:7A:93:36:9D:A4:84:20:3A:E8:78:84:11:D4:64:1C:F2:28:CD:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC16A5A6D1861217B3B1000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14f9e3ea-a772-3edc-9058-5316bea1606b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 73.228.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:6a:5a:6d:18:61:21:7b:3b:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=00c2b341-308c-4f00-9d0a-dcc2a9238202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:21:dc:10:30:8d:48:c7:d4:4d:3c:06:46: c8:cf:61:7a:31:62:4b:de:ab:4b:2d:46:c3:7c:e8: ed:08:dd:ae:c4:d2:4d:46:81:35:93:bd:d1:12:9e: 87:e4:42:61:61:aa:67:5e:aa:ee:cc:b4:89:55:3a: 76:00:35:73:c5:19:d5:ed:3b:99:e5:b2:d9:4a:39: bd:90:7c:14:29:8f:b9:ed:8d:98:f8:c0:db:73:c8: ab:87:96:87:b0:15:41:34:b9:d2:0c:60:0f:e6:cb: 4e:cb:93:3c:3b:36:1c:b0:c1:d6:f8:f1:a5:fa:f5: 0d:d8:cd:1b:11:b0:1f:79:9f:32:d2:eb:bd:31:bd: 35:c7:08:2c:13:8e:90:ee:de:ec:00:1f:d6:a5:df: 7b:02:4e:a2:a9:1a:a3:b2:cc:2e:4f:4b:ea:5b:07: 61:6f:2e:0e:6b:03:a9:9b:91:5b:08:90:3e:d7:4d: 91:50:37:74:48:d5:a5:6d:9f:32:f6:99:3c:09:ff: 21:88:e7:f6:6e:14:17:3e:99:ed:a7:7e:3f:22:19: 7f:4e:c1:87:fe:cb:06:ee:60:5b:26:1b:e0:ec:2b: 73:69:ea:0e:c7:ae:be:38:c4:ca:d8:cf:bd:3f:af: 1f:09:30:59:b6:49:65:b6:d5:83:42:b6:7e:8e:c3: 0b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:93:36:9D:A4:84:20:3A:E8:78:84:11:D4:64:1C:F2:28:CD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14f9e3ea-a772-3edc-9058-5316bea1606b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7b:0e:b9:2f:33:16:ee:60:86:55:9e:77:fb:26:85:00:e0: ae:b5:2f:c1:a1:6d:28:2b:e5:dc:16:44:54:2a:81:aa:1d:74: 39:fe:d5:00:47:18:97:ae:12:2f:30:9f:d4:e9:db:83:53:1c: 95:69:b9:32:88:99:ee:60:9c:4b:da:eb:0a:8d:23:5d:f4:00: 17:40:16:74:7a:fa:d0:7a:72:f6:6a:01:ab:fa:0c:af:99:a3: 78:eb:26:04:64:c8:56:5c:b0:02:d7:5f:62:66:fc:39:de:2c: ee:45:ac:9b:5f:28:ff:2a:79:c4:36:a9:9b:cd:44:05:93:f8: ea:2a:5b:62:0d:61:1e:70:fa:b0:83:51:fa:4c:8c:90:a0:95: 05:02:12:0e:52:70:54:f4:c4:26:6e:19:90:cd:5d:b5:d0:67: e4:76:67:8f:f3:c7:c1:42:dd:ae:31:d1:aa:28:4e:8c:ff:c3: 4e:ff:58:99:34:4b:3f:7c:a1:24:f5:8c:bc:7e:c3:9d:15:1c: 22:93:76:e4:a6:70:d6:a9:81:0e:b2:e2:38:a9:2c:46:9f:0b: 4e:af:42:fc:1c:dd:08:b4:9d:d0:bb:f4:cd:db:56:51:54:55: 2f:e9:1d:88:2e:88:89:5f:dc:9d:bd:34:a5:51:4a:5d:64:8a: ac:26:2a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswWpabRhhIXs7EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDBjMmIzNDEtMzA4Yy00ZjAwLTlkMGEtZGNjMmE5MjM4MjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfkh3BAwjUjH1E08BkbIz2F6MWJL3qtLLUbD fOjtCN2uxNJNRoE1k73REp6H5EJhYapnXqruzLSJVTp2ADVzxRnV7TuZ5bLZSjm9 kHwUKY+57Y2Y+MDbc8irh5aHsBVBNLnSDGAP5stOy5M8OzYcsMHW+PGl+vUN2M0b EbAfeZ8y0uu9Mb01xwgsE46Q7t7sAB/Wpd97Ak6iqRqjsswuT0vqWwdhby4OawOp m5FbCJA+102RUDd0SNWlbZ8y9pk8Cf8hiOf2bhQXPpntp34/Ihl/TsGH/ssG7mBb Jhvg7CtzaeoOx66+OMTK2M+9P68fCTBZtkllttWDQrZ+jsMLHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB16kzadpIQgOuh4hBHUZBzyKM2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTRmOWUzZWEtYTc3Mi0z ZWRjLTkwNTgtNTMxNmJlYTE2MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASeRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ7DrkvMxbuYIZVnnf7JoUA4K61L8GhbSgr5dwWRFQqgaoddDn+1QBH GJeuEi8wn9Tp24NTHJVpuTKIme5gnEva6wqNI130ABdAFnR6+tB6cvZqAav6DK+Z o3jrJgRkyFZcsALXX2Jm/DneLO5FrJtfKP8qecQ2qZvNRAWT+OoqW2INYR5w+rCD UfpMjJCglQUCEg5ScFT0xCZuGZDNXbXQZ+R2Z4/zx8FC3a4x0aooToz/w07/WJk0 Sz98oST1jLx+w50VHCKTduSmcNapgQ6y4jipLEafC06vQvwc3Qi0ndC79M3bVlFU VS/pHYguiIlf3J29NKVRSl1kiqwmKv0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:45:19 2025 by rpki-client